[arch-commits] Commit in newsbeuter/trunk (PKGBUILD)

[Jelle van der Waa]

    Date: Saturday, September 16, 2017 @ 19:41:55
  Author: jelle
Revision: 258571

bump pkgrel for two CVE issues

Fix the non-applied CVE patch for bookmarking remote code execution and the new
remote execution issue.

Modified:
  newsbeuter/trunk/PKGBUILD

----------+
 PKGBUILD |   10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2017-09-16 19:41:14 UTC (rev 258570)
+++ PKGBUILD	2017-09-16 19:41:55 UTC (rev 258571)
@@ -4,7 +4,7 @@
 
 pkgname=newsbeuter
 pkgver=2.9
-pkgrel=7
+pkgrel=8
 pkgdesc="A RSS feed reader for the text console with special Podcast support"
 arch=('i686' 'x86_64')
 url="http://www.newsbeuter.org/"
@@ -16,11 +16,13 @@
 source=($pkgname-r$pkgver.tar.gz::https://github.com/akrennmair/$pkgname/archive/r2.9.tar.gz
         $pkgname-$pkgver-ncursesw6.patch
         $pkgname-segfault.patch::https://github.com/akrennmair/newsbeuter/commit/33577f842d9b74c119f3cebda95ef8652304db81.patch
-        $pkgname-CVE-2017-12904.patch::https://github.com/akrennmair/newsbeuter/commit/96e9506ae9e252c548665152d1b8968297128307.patch)
+        newsbeuter-CVE-2017-12904.patch
+        remote-code-execution-podcast-name.patch)
 sha256sums=('489694a57d4af390aa15ab48b66517b0dc34a1cda4410eb5f6f997c6369f51d8'
             '5ae54c463f44d91725da3be655d2b107d598ade6da86ab4a99b10b039b8dba27'
             '60f56cabe47a1773f4a3a960ae0aee418f8a6df7bdd48b9874bf79cdd4c23b84'
-            'e68046ad75362a10db1d7a30b1193d4f9ce55c1ef99f217ee11fad66b00e9a2c')
+            '51c57a5b92704f5659e1283d1bdde521b9df64d315c9584e0fc4e69bb74db930'
+            '481b301c217f4512390ef8428654fdf217bc04c361e3e6c4f97c6c96efac161a')
 
 prepare() {
   cd "${srcdir}"/$pkgname-r$pkgver
@@ -27,6 +29,8 @@
 
   patch -p1 -i ../$pkgname-$pkgver-ncursesw6.patch
   patch -p1 -i ../$pkgname-segfault.patch
+  patch -p1 -i ../$pkgname-CVE-2017-12904.patch
+  patch -p1 -i ../remote-code-execution-podcast-name.patch
 }
 
 build() {